That stands for HTTP Strict Transport Security. Its a http header that basically tells your browser to only connect to this website via HTTPS/TLS for a configurable amount of time.

Its a protection mechanism that prevents encryption stripping man-in-the-middle attacks.